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Abstract 

QMA and QCMA are possible quantum analogues of the complexity class NP. In 
QCMA the verifier is a quantum program and the proof is classical. In contrast, in 
QMA the proof is also a quantum state. 

We show that two known QMA-complete problems can be modified to QCMA- 
complete problems in a natural way: 

(1) Deciding whether a 3-local Hamiltonian has low energy states (with energy 
smaller than a given value) that can be prepared with at most k elementary gates is 
QCMA-complete, whereas it is QMA-complete when the restriction on the complexity 
of preparation is dropped. 

(2) Deciding whether a (classically described) quantum circuit acts almost as the 
identity on all basis states is QCMA-complete. It is QMA-complete to decide whether 
it acts on all states almost as the identity. 

1 Introduction 

The complexity class QCMA is the class of decision problems for which a "yes" answer 
can be verified by a quantum computer with access to a classical proof. It contains 
MA pp, and is contained in QMA |2j. The computer is restricted to be classical for 
MA and the proof is allowed to be quantum for QMA. 

More explicitly, QMA problems read as follows: Given a quantum circuit U that 
acts on a quantum register consisting of n + m qubits where m qubits (the "ancillas" ) 
are initialized to the state |0 . . . 0), decide whether there is a state vector \ip) on the 
remaining n qubits (the "input register") such that after the implementation of U a 
measurement of the first qubit yields "1" with high probability. We say, the circuit has 
accepted the input state \ip). 

For QCMA, the problem is to decide whether there is a basis state \y) on n qubits 
that is accepted with high probability. Then the classical proof consists merely of the 
number < y < 2 n of the basis state. 
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Let us recall the formal definition of QCMA 3 . In the following we denote the 
vector space C 2 by B and the length of any binary string y £ {0, 1}* by |y|. 

Definition 1 (QCMA) 

Fix e = e(\x\) such that 2~ n ^ x ^ < e < 1/3. Then a language L is in QCMA if for every 
classical input x £ {0, 1}* one can efficiently generate (by classical precomputation) a 
quantum circuit U x ("verifier") consisting of at most p(\x\) elementary gates for an 
appropriate polynomial p such that U x acts on the Hilbert space 

H ■= B® n * ® B® m * , 

where n x and m x grow at most polynomially in \x\. The first part is the input register 
and the second is the ancilla register. Furthermore U x has the property that 

1. If x £ L there exists a classical string y £ {0, l}™ 1 such that the corresponding 
computational basis state \y) is accepted by the circuit with high probability, i.e., 

3 y £ {0, 1}"* , tr(U x (\y)(y\ ® |0 . . . 0)(0 . . . 0|) tfj P x ) > 1 - e , 

where Pi is the projection corresponding to the measurement "Is the first qubit in 
state 1 ?". 

2. If x L all computational basis states are rejected with high probability, i.e., 

V y £ {0, l} n * , tr(U x (\y) (y\ ® |0 . . . 0) (0 . . . 0|) U\ P x ) < e . 

2 Identity check on basis states 

In a recent paper [1] we stated the problem "identity check". The task is to decide 
whether a (classically described) quantum circuit U is almost equivalent to the identity 
in the sense that there is a global phase <p such that the operator norm \\U — exp(i0)l|| 
is close to zero. This problem arises naturally in the design of quantum circuits: Given 
a quantum circuit Ui ■ ■ ■ U\ : Decide whether another sequence of elementary gates 
Vk ■ ■ ■ V\ implements almost the same unitary transformation, i.e., whether 

u l ---u x vl--vl 

is almost equivalent to the identity. 

But also a weaker definition of equivalence is natural. Usually, quantum algorithms 
start with classical input (basis states as input) and end with measurements in the 
computational basis to obtain the classical output. In this context one does not care 
whether two circuits agree on all states, it is only relevant whether they agree on the 
basis states. Below we shall show that this problem is QCMA-complete. 

But what makes the difference between the original requirement and the weaker 
formulation? First it is clear that a unitary operator that maps every basis state 
on itself may give different phases to different basis states. But one can see easily 
that this does not make the difference between QCMA and QMA (in case these classes 
are indeed different): The statement that a quantum circuit gives different phases to 
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different basis vectors has still a classical proof. It is given by two numbers of basis 
states with non-negligible phase difference. The verifier can check the phase difference 
efficiently by quantum phase estimation jS] (compare also [I]). 

What can possibly make the difference between QMA and QCMA is the fact that 
there exist unitary transformations U that have large norm distance to all trivial trans- 
formations exp(i(f))l even though the distance between U\x) and \x) is exponentially 
small on all basis states \x). Let U = HDH, where H is the Hadamard transformation 
on n qubits and D = diag(— 1, 1, 1, . . . , 1) is a controlled phase shift on the first qubit. 
The norm distance ||1 — D\\ is 2. But for all computational basis states |y) we have 

||(1 - HDH)\y)\\ = \\H(1 - D)H\y)\\ = ||(2/2") ]T \y)\\ = 2/2«/ 2 

y 

since H diag(l, 0, 0, . . . , 0) H is the all-one-matrix. 

Let us define the problem "identity check on basis states". 

Definition 2 (Identity check on basis states) 

Let x be a classical description of a quantum circuit Z x on n qubits. Given the promise 
that 

1. either there is a binary string z such that 

\{z\Z x \z)\ 2 < 

i.e., Z x does not act as the identity on the basis states, 

2. or for all binary strings z 

\(z\Z x \z)\ 2 > 1-5, 
i.e., Z x acts "almost" as the identity on the basis states, 
where fi — 5 > l/poly(\x\). Decide which case is true. 

It is easily seen that this problem is contained in QCMA since the proof for case 1 
is given by a string that describes the basis state \z). Then we perform the quantum 
circuit Z x . An n-fold controlled-NOT can be used to flip an additional ancilla qubit if 
and only if the output is \y). The additional ancilla is the output qubit of the verifier. 

QCMA-completeness of this problem can be proved in strong analogy to the proof 
for QMA-completeness of "identity check". Let U be a quantum circuit as in Defini- 
tion^ We construct the quantum circuit Z that uses U and W as subroutines. 

Let R be the rotation 

/ cos(y?) — s'm((p) \ 
\ s'm(ip) cos(ip) J ' 

with < (p < tt/2 and R\ be the rotation R controlled by the m ancilla qubits 
corresponding to U. R\ is implemented if and only if the ancillas are correctly initialized 
in the state 1 . . . 0) . (In [I] we have used controlled phase shift which was diagonal 
in the computational basis). Let Ri be the same rotation R controlled by the output 
qubit of U. The whole circuit Z := U^R2URi is shown in Fig. 1. 

The following theorem shows that the problem of deciding whether there are basis 
states that are likely to be accepted by U can be reduced to identity check on basis 
states. 
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Figure 1: The circuit Z acts on all basis states almost as the identity if and only if no basis 
state is likely to be accepted by U . 

Theorem 1 Let U be a quantum circuit on B n+m with the promise that one of the two 
cases in Definition^ is true. Then the following statement holds for the corresponding 
circuit Z: 

If case 1 is true then there is a binary string z such that 

\(z\Z\z}\ 2 < (cos(2v?) + ^f~e) 2 , 

where \z) = |0) (8> |y)|00 • • • 0) and y is the accepting classical witness for the the circuit 
U. 

If case 2 is true then for all binary strings z we have 

\(z\Z\z)\ 2 > (cos(vp) - 2^~e) 2 . 

Proof: The proof is in strong analogy to the proof of Theorem 1 in J3]. The im- 
portant difference is that no superpositions between states with correctly and wrongly 
initialized ancillas have to be considered. Therefore the bounds are easier to derive. 

Consider case 1. Let \y) be a binary string that is accepted by U with high prob- 
ability (we drop the subscripts for fixed x). We consider the binary string \z) := 
|0) <8> \y) (8> 1 00 • • • 0} to show that Z is "far" from the identity on the basis states. 

Z\z) = U ] R 2 URi\z) 

= U^R 2 U(cos <p)\0) + sin^|l)) (8) \y) <g> |0 . . . 0) 

= R 2 (cos ip)\0) +sinp|l)) O (ci|l) <8 + c |0) 8) \ip }) 

Due to the high probability of acceptance we have |co| < yfi. Now we consider only 
the term with c\ and obtain 

XJ^Ri{coB(p)\Q) + wnp\l)) ®c x \l) ® \ipi) 
= (cos(2^))|0)+sin(2^)|l))(8)ciC/(|l)®|^i)). (1) 
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The first component is the single ancilla on which the rotation R is performed, the 
second component is the output of U and the third tensor component is the remaining 
part of the register where U acts on. 

The overlap between the initial vector \z) and the vector of eq. is at most 
|ci| cos^^). Taking into account the length of the neglected vector we obtain 

< cos(2v?) + y/l. 

Consider case 2. Let z be a string such that the bits corresponding to ancillas of 
U are all set to 0. Let Pi as in Definition ^ be the projection onto the state |1) of the 
output qubit corresponding to U. Note that R 2 (l — Pi) = 1 — Pi- Then we have 

\(z\Z\z)\ = \{z\U ] R 2 URi\z)\ 

= \(z\U^R 2 (Pi + l-Pi)URi\z}\ 

= \{z\U ] R 2 PiURi +Ri - U ] PiURi\z)\ 

> |(z|.Ri|z}| - \{z\U ] R 2 PiURi\z)\ - \{z\U ] PiURi\z)\ 

> cos <p — 2yfe . 

The latter inequality is due to the fact that the length of the vector P\URi\z) is at 
most yfe due to the small probability of acceptance. 

Let z be a string such that the bits corresponding to the ancillas of U are not all 
set to 0. Then we have 

\{z\U^R 2 URi\z)\ = \{z\U^ R 2 U\z)\ 
> cos(v?) . 

This can be seen by writing \z) as 1^-^) © |^o) © where 1^-^), |^o) an d 1^^) 

are vectors in the eigenspaces of WR 2 U corresponding to the eigenvalues e~ l(f , 1 and 
e lip , respectively. Therefore, we have 

\(z\U^R 2 U\z)\ = \pe- i{p + + r\ 

with p := || l^-^)!) 2 , q := || l^o)!) 2 and r := \\ l^^,)!! 2 . By elementary geometry the 
shortest vector in the convex span of the complex values e~ lifi , 1, e rip has length cos(<^). 
This completes the proof. □ 



3 Low energy states with low complexity 

The problem of determining the ground state energy and spectral gaps of many-particle 
systems is a highly non-trivial task. In [Hj (based on results in |2j) it was shown that 
even the following instance is QMA-complete: Given a 3- local Hamiltonian, i.e., a 
selfadjoint operator on ra-qubits which is a sum of operators that act on only 3 qubits. 
Furthermore, let the promise be given that either all eigenvalues of H are at least b or 
there exists an energy value smaller or equal to a. Decide which statement of both is 
true. 



5 



But there is a slightly different question which is interesting as well: It is to decide 
whether there exist states with energy at most a which are simple to prepare. Here 
simplicity will be defined by the number of required elementary gate operations. This 
problem arises naturally when one addresses the question whether extremely efficient 
cooling mechanisms could prepare states that are difficult to obtain with a reasonable 
number of quantum gates |H] . 

Note that it is not clear that it should be easier to decide whether there exist 
low-complexity states with low energy than to decide whether low energy states (with 
energy at most a) do exist at all. In special instances one may possibly have arguments 
showing that low eigenvalues exist although one has no idea how to prepare them. 
However, here we show that the problem class of deciding whether a general 3-local 
Hamiltonian has low-energy states includes the problem of deciding whether there are 
low complexity low energy states. This follows from the fact that the first problem 
class is QMA and the latter one is QCMA. 

Now we state the considered problem class formally. 

Definition 3 (Low complexity low energy states) 

Given a 3-local Hamiltonian H onn qubits and real numbers a, b with b—a > l/poly(n). 
Let the set of elementary gates be the Shor basis Then the problem "low complexity 
low energy states" is to decide which one of the following cases is true given the promise 
that either of two holds: 

1. There is a sequence of k elementary gates such that 

|V> := V\0...0) 
is a state with energy less than a, i.e. 

2. All quantum circuits V that consist of at most k gates can only prepare states \tp) 
with energy at least b, i.e., 

We obtain the following theorem: 
Theorem 2 The problem "low complexity low energy states" is QCMA- complete. 

Proof: It is easy to see that the problem is in QCMA: the witness is a classical 
string describing the preparation procedure. The fact that is indeed a state with 
energy not greater than a can be checked as in (2]. 

Now we show that the problem encompasses QCMA. We consider a quantum circuit 
U and the task is to decide whether there is a basis state that is accepted with high 
probability. Let n be the number of qubits of the input register and m be the number 
of ancilla qubits. Then we construct a circuit U with n input qubits and n + m ancillas 
as follows: n C-NOT gates copy the input to the n additional ancillas. It is easy to 
see that U has a state that is accepted with high probability if and only if U accepts 
a basis state with high probability. 
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Now we use the construction of [5] and obtain a 3-local Hamiltonian H associated 
with U. Let L be the number of gates of U. The exact form of H is not important 
here, we only rephrase the following four results of jSJ 12] which are necessary for our 
proof: 

1. The Hamiltonian corresponding to H acts onn + m + L qubits where h + rh is 
the size of the rgister where U acts on (the input is an n-qubit state and the 
ancilla register of U consists of rh qubits. The additional register with size L is a 
so-called "clock" register. Its role is not relevant here. 

2. Whenever the circuit U rejects all states with probability at least 1 — e there is 
no eigenvalue of H smaller or equal to c/L 3 for an appropriate constant c. 

3. If the state is accepted by U with probability 1 — e the state 



3=0 

is a low energy state, i.e., 



1 L 

-j==Y, u r--Ui(m®\o...o))®\2 : >-i) 



( V \H\ti) < 



L + l 



4. In case that the "confidence value" e is too large such that e/(L + l) > c/L 3 or the 
gap between both values is too small, one may use probabbility amplification 2 
and define a circuit U' given by many parallel implementations of U with majority 
vote in the end such the promise in Definition ^ holds for a smaller value e'. Then 
the method of |S] is applied to obtain a Hamiltonian H corresponding to U' such 
that e/(L + 1) is sufficiently smaller than c/L 3 . 

Consider the case that there is no basis state input of U that is accepted with 
probability greater than e. Then there is also no input state at all that is accepted by 
U with probability greater than e. As rephrased above, there is no eigenvalue of H 
smaller than c/L 3 . 

Consider the case that there is a basis state |x) that is accepted by U with prob- 
ability at least 1 — e. It is accepted by U with the same probability. Then the state 
| r/) defined above is a low energy state. It can be prepared efficiently, i.e. there is 
a polynomial p such that \rj) can be obtained by elementary gates. We omit 

technical details but it is not difficult to show that the superposition 



1 L 

r j + 1 ^ 



can be prepared efficiently. By applying L + 1-fold controlled Lj-gates one obtains the 
state \rf). 

The question whether there is a low energy state that can be prepared with at most 
elementary gates is hence equivalent to the question whether there is a basis 
state that is accepted by U . □ 
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4 Remark on other problems in QCMA 



To find simple procedures for preparing certain entangled multi-particle states from 
unentangled initial states is an interesting question of quantum information theory. 
Once one has found a procedure that prepares a desired state \tp) from the state 

1 0} , for instance, one may want to know whether there is also a simpler way to 

prepare 

Hence the following type of problems seems natural: Given a classical description 
of a quantum circuit U, decide whether there is also a simpler preparation procedure 
for \ip) := ?7|0 ... 0) in the following sense: 

1. Given an elementary set of universal quantum gates. Decide whether there exists 
a quantum circuit V consisting of at most k gates preparing almost the same 
state (norm difference at most 1 — 5) or all states prepared using at most k gates 
have at least the norm distance 1 — fJ> from l^} 

2. Let I and T be given, decide whether there is a /-local Hamiltonian preparing \tp) 
approximatively by its autonomous evolution within the time T, i.e., 

exp(-iH"i)|0...0) 

is almost the same state as for an appropriate value t < T. 

3. Consider the control-theoretic setting as, for instance, the one appearing in NMR- 
experiments ^0] : Given a pair-interaction Hamiltonian H and a maximal running 
time T. Let a state |^) be specified by a quantum circuit as above, decide if 
it is possible to intersperse the natural time-evolution by at most k fast local 
operations (i.e. one-qubit rotations) such that the resulting unitary prepares the 
desired state such that the maximal running time T is not exceeded. 

These types of problems are clearly in QCMA when the desired accuracies are de- 
fined as in Definition [2] since the proof consists of a classical description of the prepa- 
ration procedure (i.e. the gate sequence, the Hamiltonian or the control sequence). 
The verifier can check that the procedure does indeed prepare the desired state by 
simulating the described preparation procedure on a quantum computer and applying 
W. Then he measures the obtained state in the computational basis. 

We do not know whether these problems are contained in any lower complexity 
class. 

This work was supported by the BMBF-project 01/BB01B. 
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